unit-test-utility-methods
Fail
Audited by Snyk on Mar 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned the document for literal, high-entropy values that could provide access. I found one potential sensitive literal: the 16-digit credit card number "4532015112830366" used in ValidatorUtilsTest.shouldValidateCreditCard. This is a high-entropy numeric string in a format that could be a real/usable payment card (Luhn-format), so it meets the "literal value that provides access" criterion and is flagged.
Everything else in the prompt is either:
- obvious examples/placeholders (e.g., "user@example.com", "not a url", "invalid-email"),
- test phone numbers or 555-prefixed numbers (common test data),
- simple/sample strings or low-entropy values (e.g., "hello", "default", "value"),
- or truncated/redacted/formatted examples — all of which I ignored per the rules.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata